penguins-eggs 25.11.21 → 25.12.7

package/package.json

@@ -2,7 +2,7 @@
   "name": "penguins-eggs",
   "shortName": "eggs",
   "description": "A remaster system tool, compatible with Almalinux, Alpine, Arch, Debian, Devuan, Fedora, Manjaro, Opensuse, Ubuntu and derivatives",
-  "version": "25.11.21",
+  "version": "25.12.7",
   "author": "Piero Proietti",
   "bin": {
     "eggs": "./bin/run.js"
@@ -13,13 +13,14 @@
     "@oclif/plugin-autocomplete": "^3.2.39",
     "@oclif/plugin-help": "^6.2.36",
     "@oclif/plugin-version": "^2.2.36",
-    "@types/express": "^5.0.5",
+    "@types/express": "^5.0.6",
     "ansis": "^4.2.0",
     "axios": "^1.13.2",
+    "bcryptjs": "^3.0.3",
     "chalk": "^5.6.2",
     "cli-cursor": "^5.0.0",
     "debug": "^4.4.3",
-    "express": "^5.1.0",
+    "express": "^5.2.1",
     "ink": "^5",
     "ink-progress-bar": "^3.0.0",
     "ink-spinner": "^5.0.0",
@@ -29,7 +30,6 @@
     "netmask": "^2.0.2",
     "react": "^18.3.1",
     "read": "^4.1.0",
-    "shelljs": "^0.10.0",
     "systeminformation": "^5.27.11",
     "tftp": "^0.1.2",
     "ws": "^8.18.3"
@@ -37,6 +37,7 @@
   "devDependencies": {
     "@oclif/prettier-config": "^0.2.1",
     "@oclif/test": "^4.1.15",
+    "@types/bcryptjs": "^3.0.0",
     "@types/chai": "^5.2.3",
     "@types/debug": "^4.1.12",
     "@types/glob": "^9.0.0",
@@ -44,28 +45,27 @@
     "@types/js-yaml": "^4.0.9",
     "@types/mocha": "^10.0.8",
     "@types/mustache": "^4.2.6",
-    "@types/netmask": "^2.0.5",
+    "@types/netmask": "^2.0.6",
     "@types/node": "^22.15.30",
     "@types/react": "^18.3.18",
     "@types/read": "^0.0.32",
-    "@types/shelljs": "^0.8.17",
     "@types/ws": "^8.18.1",
     "chai": "^6.2.1",
     "eslint": "^9.39.1",
-    "eslint-config-oclif": "^6.0.118",
+    "eslint-config-oclif": "^6.0.124",
     "eslint-config-prettier": "^10.1.8",
-    "glob": "^12.0.0",
+    "glob": "^13.0.0",
     "mocha": "^11.7.5",
-    "oclif": "^4.22.47",
+    "oclif": "^4.22.54",
     "perrisbrewery": "^25.9.16",
-    "prettier": "^3.6.2",
+    "prettier": "^3.7.4",
     "shx": "^0.4.0",
     "ts-node": "10.9.2",
     "ts-prune": "^0.10.3",
     "typescript": "^5.9.3"
   },
   "engines": {
-    "node": ">=16.0.0"
+    "node": ">=22.0.0"
   },
   "files": [
     ".oclif.manifest.json",
@@ -110,10 +110,9 @@
   "repository": "pieroproietti/penguins-eggs",
   "types": "dist/index.d.ts",
   "scripts": {
-    "appimage": "pnpm build && ./scripts/appimage-build.sh",
-    "appimage:install": "./scripts/appimage-install.sh",
+    "appimage": "pnpm build && ./appimage.sh",
     "build": "pnpm clean && shx rm -rf dist && tsc -p . && oclif manifest",
-    "clean": "rm -rf build dist *.AppImage AppDir squashfs-root",
+    "clean": "rm -rf build dist *.AppImage AppDir",
     "deb": "pnpm build && pb deb --release $(cat ./release)",
     "format": "prettier --write \"+(src|test)/**/*.+(ts|js|json)\"",
     "lint": "eslint . --ext .ts",

package/perrisbrewery/template/dependencies.yaml

@@ -22,6 +22,7 @@ common:
   - lvm2  # pvdisplay in krill
   - nodejs (>= 18)
   - parted 
+  - pxelinux
   - policykit-1 | pkexec # calamares
   - rsync
   - squashfs-tools

package/scripts/_eggs

@@ -58,6 +58,37 @@ _values "completions" \
   esac
 }
 
+_eggs_setup() {
+  local context state state_descr line
+  typeset -A opt_args
+
+  _arguments -C "1: :->cmds" "*::arg:->args"
+
+  case "$state" in
+    cmds)
+_values "completions" \
+"install[Automatically check and install system prerequisites]" \
+"purge[Automatically check and install system prerequisites]" \
+
+      ;;
+    args)
+      case $line[1] in
+        "install")
+          _arguments -S \
+--help"[Show help for command]" \
+"*: :_files"
+        ;;
+        "purge")
+          _arguments -S \
+--help"[Show help for command]" \
+"*: :_files"
+        ;;
+
+      esac
+      ;;
+  esac
+}
+
 _eggs_tools() {
   local context state state_descr line
   typeset -A opt_args
@@ -191,6 +222,7 @@ _eggs() {
     cmds)
       _values "completions" \
 "export[export penguins-eggs AppImage to the destination host]" \
+"setup[Automatically check and install system prerequisites]" \
 "tools[clean system log, apt, etc]" \
 "wardrobe[get warorobe]" \
 "adapt[adapt monitor resolution for VM only]" \
@@ -203,7 +235,6 @@ _eggs() {
 "love[the simplest way to get an egg!]" \
 "mom[ask help from mommy - TUI helper]" \
 "produce[produce a live image from your system]" \
-"setup[Automatically check and install system prerequisites]" \
 "status[informations about eggs status]" \
 "update[update the Penguins' eggs tool]" \
 "autocomplete[Display autocomplete installation instructions.]" \
@@ -216,6 +247,9 @@ _eggs() {
 export)
   _eggs_export
   ;;
+setup)
+  _eggs_setup
+  ;;
 tools)
   _eggs_tools
   ;;
@@ -335,12 +369,6 @@ _arguments -S \
 "(-y --yolk)"{-y,--yolk}"[force yolk renew]" \
 --help"[Show help for command]" \
 "*: :_files" ;; 
-setup)
-_arguments -S \
-"(-c --check)"{-c,--check}"[check status only, do not install]" \
-"(-f --force)"{-f,--force}"[force installation even if already installed]" \
---help"[Show help for command]" \
-"*: :_files" ;; 
 status)
 _arguments -S \
 "(-h --help)"{-h,--help}"[Show CLI help.]" \

package/scripts/boot-encrypted-root.sh

@@ -0,0 +1,220 @@
+#!/bin/sh
+# /scripts/live-premount/boot-encrypted-root.sh
+#
+# This script is designed to Boot Encrypted Linux Live (BELL).
+#
+# Its main purpose is to find an encrypted root image file (root.img) 
+# on a live USB/DVD, ask the user for a passphrase to unlock it, 
+# and then copy the main system filesystem (filesystem.squashfs) 
+# from inside the encrypted image into RAM.
+# 
+# the process continue with standard live-boot 
+
+# enable echo
+# set -e
+
+echo "BELL: Boot Encrypted Linux Live"
+
+#################################################
+# 1. Setup and Find Media
+
+# 1.1 load modules
+echo "BELL: loading modules..."
+modprobe loop 2>/dev/null || true
+modprobe dm_mod 2>/dev/null || true
+modprobe dm_crypt 2>/dev/null || true
+modprobe overlay 2>/dev/null || true
+modprobe ext4 2>/dev/null || true
+modprobe squashfs 2>/dev/null || true
+sleep 2
+
+
+# 1.2 find BELL media drive
+echo "BELL: find BELL media drive..."
+mkdir -p /mnt/live-media /mnt/ext4
+BELL_MEDIA_MNT="/mnt/live-media"
+LIVE_DEV=""
+
+# find to max 20 devices
+MAX_WAIT_DEV=20; COUNT_DEV=0
+while [ -z "$LIVE_DEV" ] && [ $COUNT_DEV -lt $MAX_WAIT_DEV ]; do
+    ls /dev > /dev/null
+    for dev in /dev/sr* /dev/sd* /dev/vd* /dev/nvme*n*; do
+        if [ ! -b "$dev" ]; then continue; fi
+        if mount -o ro "$dev" "$BELL_MEDIA_MNT" 2>/dev/null; then
+            if [ -f "${BELL_MEDIA_MNT}/live/root.img" ]; then
+                echo "BELL: Found BELL media on $dev"
+                LIVE_DEV=$dev
+                break 2
+            else
+                umount "$BELL_MEDIA_MNT" 2>/dev/null || true
+            fi
+        fi
+    done
+    sleep 1
+    COUNT_DEV=$((COUNT_DEV+1))
+done
+
+if [ -z "$LIVE_DEV" ]; then
+    echo "BELL: Error: no live BELL drive found!"
+    ls /dev
+    exit 1
+fi
+
+ROOT_IMG_RO="${BELL_MEDIA_MNT}/live/root.img"
+RAM_MEDIA_MNT="/run/live/medium" # final destination in RAM
+
+
+#################################################
+# 2. Prepare Encrypted Image
+
+# 2.1 loop device
+echo "BELL: loop device association for $ROOT_IMG_RO..."
+LOOP_DEV_OUTPUT=$(/sbin/losetup -f --show "$ROOT_IMG_RO" 2>/dev/null); LOSETUP_EXIT_STATUS=$?
+if [ $LOSETUP_EXIT_STATUS -ne 0 ] || [ -z "$LOOP_DEV_OUTPUT" ] || ! [ -b "$LOOP_DEV_OUTPUT" ]; then
+    echo "BELL: Error: loop association failed!"
+    exit 1
+fi
+LOOP_DEV="$LOOP_DEV_OUTPUT"
+echo "BELL: loop device $ROOT_IMG_RO associated to: $LOOP_DEV"
+
+
+
+#################################################
+# 3. Unlock LUKS (User Interaction)
+
+# disable 'set -e' to let 3 tempts 
+#set +e
+MAX_ATTEMPTS=3
+ATTEMPT=1
+UNLOCKED=0
+
+while [ $ATTEMPT -le $MAX_ATTEMPTS ]; do
+
+    # check if plymouth is active
+    if plymouth --ping 2>/dev/null; then
+
+        # request the password in plymouth and pass it to cryptsetup via stdin (--key-file -)
+        if plymouth ask-for-password --prompt="Enter passphrase ($ATTEMPT/$MAX_ATTEMPTS)" | cryptsetup open --readonly --key-file - "$LOOP_DEV" live-root; then
+            UNLOCKED=1
+            break
+        else
+            if [ $ATTEMPT -lt $MAX_ATTEMPTS ]; then
+                plymouth display-message --text="Incorrect passphrase. Try again..."
+                sleep 2 # wait 2 seconds to read message
+            fi
+        fi
+    else
+        # Fallback: Plymouth not active
+        echo "Please enter passphrase for $LOOP_DEV ($ATTEMPT/$MAX_ATTEMPTS):"
+
+        if cryptsetup open --readonly "$LOOP_DEV" live-root; then
+            UNLOCKED=1
+            break
+        else
+            if [ $ATTEMPT -lt $MAX_ATTEMPTS ]; then
+                echo "Incorrect passphrase. Please try again."
+            fi
+        fi
+    fi
+
+    ATTEMPT=$((ATTEMPT + 1))
+    sleep 1
+done
+
+# Enable echo
+# set -e
+
+# check if all attempts have failed
+if [ $UNLOCKED -eq 0 ]; then
+    if plymouth --ping 2>/dev/null; then
+        plymouth display-message --text="LUKS Unlock Failed: Max attempts reached"
+        sleep 5
+    fi
+    /sbin/losetup -d "$LOOP_DEV" || true
+    exit 1
+fi
+
+echo "BELL: LUKS unlocked ($LOOP_DEV -> live-root) [readonly]. Waiting for mapper..."
+
+
+#################################################
+# 4. copy System to RAM
+
+# 4.1 waiting mapper
+MAX_WAIT_MAP=10; COUNT_MAP=0
+while [ ! -b /dev/mapper/live-root ] && [ $COUNT_MAP -lt $MAX_WAIT_MAP ]; do
+    sleep 1
+    COUNT_MAP=$((COUNT_MAP+1))
+done
+
+if [ ! -b /dev/mapper/live-root ]; then
+    echo "BELL: Error: mapper did not appear."
+    cryptsetup close live-root || true
+    /sbin/losetup -d "$LOOP_DEV" || true
+    exit 1
+fi
+
+# 4.2 mount ext4 filesystem
+echo "BELL: mounting ext4 filesystem..."
+mount -t ext4 -o ro /dev/mapper/live-root /mnt/ext4
+
+SQFS_SRC="/mnt/ext4/filesystem.squashfs"
+if [ ! -f "$SQFS_SRC" ]; then
+    echo "BELL: error: $SQFS_SRC not found!"
+    exit 1
+fi
+
+
+# 4.3. Prepare RAM destination /run
+echo "BELL: preparing RAM disk ${RAM_MEDIA_MNT}..."
+SQFS_SIZE_BYTES=$(stat -c%s "$SQFS_SRC")
+NEEDED_SIZE_MB=$(( $SQFS_SIZE_BYTES / 1024 / 1024 + 500 )) # add 500MB buffer
+echo "BELL: Estimated space required in /run: ${NEEDED_SIZE_MB} MB"
+echo "BELL: increase size /run (tmpfs)..."
+if ! mount -o remount,size=${NEEDED_SIZE_MB}M /run; then
+    echo "BELL: WARN: Remount /run failed, space may be insufficient."
+    df -h /run
+fi
+mkdir -p "${RAM_MEDIA_MNT}/live"
+
+# 4.4 copy ONLY filesystem.squashfs to RAM
+SQFS_DEST="${RAM_MEDIA_MNT}/live/filesystem.squashfs"
+echo "BELL: copying $SQFS_SRC -> $SQFS_DEST..."
+if command -v rsync >/dev/null; then
+    rsync -a --info=progress2 "$SQFS_SRC" "$SQFS_DEST"
+else
+    cp "$SQFS_SRC" "$SQFS_DEST"
+fi
+SQFS_SIZE=$(du -h "$SQFS_DEST" | cut -f1)
+echo "BELL: filesystem.squashfs ($SQFS_SIZE) copied to RAM."
+
+# 4.5 copy .disk
+if [ -d "${BELL_MEDIA_MNT}/.disk" ]; then
+    cp -a "${BELL_MEDIA_MNT}/.disk" "${RAM_MEDIA_MNT}/"
+    echo "BELL: .disk copied."
+else
+    echo "BELL: Warning: .disk not found."
+fi
+
+# 4.6 Copy vmlinuz and initrd (we need to install the system)
+cp -a "${BELL_MEDIA_MNT}/live/vmlinuz"* "${RAM_MEDIA_MNT}/live/" 2>/dev/null || true
+cp -a "${BELL_MEDIA_MNT}/live/initrd"* "${RAM_MEDIA_MNT}/live/" 2>/dev/null || true
+echo "BELL: Attempted kernel/initrd copy (any errors ignored)."
+
+
+#################################################
+# 6. Cleanup and Hand-off
+echo "BELL: cleaning used mounts and devices..."
+umount /mnt/ext4 || echo "BELL: WARN: umount /mnt/ext4 failed ($?)"
+cryptsetup close live-root || echo "BELL: WARN: cryptsetup close live-root failed ($?)"
+/sbin/losetup -d "$LOOP_DEV" || echo "BELL: WARN: losetup -d $LOOP_DEV failed ($?)"
+umount "$BELL_MEDIA_MNT" || echo "BELL: WARN: umount ${BELL_MEDIA_MNT} failed ($?)"
+echo "BELL: cleaning complete."
+
+
+# 6.1 switching to live boot
+echo "BELL: live ISO image built in RAM on ${RAM_MEDIA_MNT}"
+# ls -l "$RAM_MEDIA_MNT"
+# ls -l "${RAM_MEDIA_MNT}/live"
+exit 0

package/scripts/eggs.bash

@@ -25,7 +25,8 @@ krill --btrfs --chroot --crypted --domain --halt --help --ip --nointeractive --n
 love --help --verbose --hidden --nointeractive --clone --homecrypt --fullcrypt
 mom --help
 produce --addons --basename --clone --homecrypt --fullcrypt --excludes --help --hidden --kernel --links --max --noicon --nointeractive --pendrive --prefix --release --script --standard --theme --includeRootHome --verbose --yolk
-setup --check --force
+setup:install 
+setup:purge 
 status --help --verbose
 tools:clean --help --nointeractive --verbose
 tools:repo --add --help --nointeractive --remove --verbose